salt.states.vault¶

Warning

This module will be removed from Salt in version 3009 in favor of the vault Salt Extension.

States for managing Hashicorp Vault. Currently handles policies. Configuration instructions are documented in the execution module docs.

maintainer:: SaltStack
maturity:: new
platform:: all

New in version 2017.7.0.

salt.states.vault.policy_absent(name)¶

Ensure a Vault policy with the given name and rules is absent.

name: The name of the policy

salt.states.vault.policy_present(name, rules)¶

Ensure a Vault policy with the given name and rules is present.

name: The name of the policy
rules: Rules formatted as in-line HCL

demo-policy:
  vault.policy_present:
    - name: foo/bar
    - rules: |
        path "secret/top-secret/*" {
          policy = "deny"
        }
        path "secret/not-very-secret/*" {
          policy = "write"
        }